diff options
| author | Martin Hansson <mhansson@mysql.com> | 2008-09-09 12:49:08 +0200 |
|---|---|---|
| committer | Martin Hansson <mhansson@mysql.com> | 2008-09-09 12:49:08 +0200 |
| commit | c0cfce21d6cf6d1a1fbd8b080f91ed6a88b78329 (patch) | |
| tree | 8b572114372452909352e1cc7a4595354d141e7b /mysql-test/r/view_grant.result | |
| parent | 3bad2119f9dedc581bf3b9d7335740f563db5803 (diff) | |
| download | mariadb-git-c0cfce21d6cf6d1a1fbd8b080f91ed6a88b78329.tar.gz | |
Bug#35600: Security breach via view, I_S table and prepared
statement/stored procedure
View privileges are properly checked after the fix for bug no
36086, so the method TABLE_LIST::get_db_name() must be used
instead of field TABLE_LIST::db, as this only works for tables.
Bug appears when accessing views in prepared statements.
mysql-test/r/view_grant.result:
Bug#35600: Extended existing test case.
mysql-test/t/view_grant.test:
Bug#35600: Extended existing test result.
sql/sql_parse.cc:
Bug#35600: Using method to retrieve database name instead of
field.
Diffstat (limited to 'mysql-test/r/view_grant.result')
| -rw-r--r-- | mysql-test/r/view_grant.result | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/mysql-test/r/view_grant.result b/mysql-test/r/view_grant.result index 9a4fa95912d..1821e50e294 100644 --- a/mysql-test/r/view_grant.result +++ b/mysql-test/r/view_grant.result @@ -978,7 +978,9 @@ CREATE DATABASE mysqltest1; USE mysqltest1; CREATE VIEW v1 AS SELECT * FROM information_schema.tables LIMIT 1; CREATE ALGORITHM = TEMPTABLE VIEW v2 AS SELECT 1 AS A; +CREATE VIEW test.v3 AS SELECT 1 AS a; GRANT SELECT ON mysqltest1.* to mysqluser1@localhost; +GRANT ALL ON test.* TO mysqluser1@localhost; PREPARE stmt_v1 FROM "SELECT * FROM mysqltest1.v1"; PREPARE stmt_v2 FROM "SELECT * FROM mysqltest1.v2"; REVOKE SELECT ON mysqltest1.* FROM mysqluser1@localhost; @@ -986,6 +988,11 @@ EXECUTE stmt_v1; ERROR 42000: SELECT command denied to user 'mysqluser1'@'localhost' for table 'v1' EXECUTE stmt_v2; ERROR 42000: SELECT command denied to user 'mysqluser1'@'localhost' for table 'v2' +PREPARE stmt FROM "SELECT a FROM v3"; +EXECUTE stmt; +a +1 DROP VIEW v1, v2; DROP DATABASE mysqltest1; +DROP VIEW test.v3; DROP USER mysqluser1@localhost; |